v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-142381,278956.3 KB

Creates an authorizer.

Requires permission to access the CreateAuthorizer action.

post/authorizer/{authorizerName}

Path parameters

authorizerNamestring required

The authorizer name.

Request body

authorizerFunctionArnstring required

The ARN of the authorizer's Lambda function.

tokenKeyNamestring

The name of the token key used to extract the token from the HTTP headers.

tokenSigningPublicKeysobject

The public keys used to verify the digital signature returned by your custom authentication service.

status'ACTIVE' | 'INACTIVE'

The status of the create authorizer request.

signingDisabledboolean

Specifies whether IoT validates the token signature in an authorization request.

enableCachingForHttpboolean
<p>When <code>true</code>, the result from the authorizer’s Lambda function is cached for clients that use persistent HTTP connections. The results are cached for the time specified by the Lambda function in <code>refreshAfterInSeconds</code>. This value does not affect authorization of clients that use MQTT connections.</p> <p>The default value is <code>false</code>.</p>

Response

Success

authorizerNamestring

The authorizer's name.

authorizerArnstring

The authorizer ARN.